What is a Breach?

According to the Department of Defense, a breach of personal information occurs when the information is lost, disclosed to, accessed by, or potentially exposed to unauthorized individuals, or compromised in a way where the subjects of the information are negatively affected.

• Full DOD breach definition
• Breach information under the Health Insurance Portability and Accountability Act Breach Notification Rule

Breach Reporting

The Defense Health Agency Privacy and Civil Liberties Office coordinates breach reporting within the Military Health System. Email us if you have questions about breaches or breach reporting within the MHS.

Guidance tools for breach reporting:

• Breach Reporting Form
• Guidelines for Reporting Breaches - Please note: This document is currently undergoing updates and a new version will be made available when possible
• DOD Memorandum 6025.18 Implementation of the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule in DOD Health Care Programs